Cert-manager: Error installing Cert-manager, ServiceAccount cert-manager-cainjector already exist

[iMacX]

Hi,

I'm trying to install cert-manager with Helm 3.

I installed first the CRD with the following command:

kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v0.13.0/cert-manager.yaml

Then, tried to install cert-manager with helm:

helm install cert-manager jetstack/cert-manager -n cert-manager --version v0.13.0

Got the following message:
Error: rendered manifests contain a resource that already exists. Unable to continue with install: existing resource conflict: kind: ServiceAccount, namespace: cert-manager, name: cert-manager-cainjector

Expected behaviour:
cert-manager installed

Environment details::

• Kubernetes version: v1.15.7
• Cloud-provider/provisioner: AKS Azure
• cert-manager version: v0.13.0
• Install method : helm

How can I resolve that?

thank you

/kind bug

[teddyphreak]

First time installing cert-manager and just ran into your issue earlier this morning:
$ helm install cert-manager jetstack/cert-manager --namespace cert-manager

Error: rendered manifests contain a resource that already exists. Unable to continue with install: existing resource conflict: kind: ClusterRole, namespace: , name: cert-manager-cainjector

This seems to work for some reason

$ helm template cert-manager jetstack/cert-manager --namespace cert-manager | kubectl apply -f -

serviceaccount/cert-manager-cainjector created
serviceaccount/cert-manager created
serviceaccount/cert-manager-webhook created
clusterrole.rbac.authorization.k8s.io/cert-manager-cainjector unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-issuers unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificates unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-edit unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-challenges unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-orders unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-view unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-webhook:webhook-requester unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-cainjector unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-orders unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-issuers unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificates unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-challenges unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-webhook:auth-delegator configured
role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection unchanged
role.rbac.authorization.k8s.io/cert-manager:leaderelection unchanged
rolebinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection unchanged
rolebinding.rbac.authorization.k8s.io/cert-manager:leaderelection configured
rolebinding.rbac.authorization.k8s.io/cert-manager-webhook:webhook-authentication-reader configured
service/cert-manager created
service/cert-manager-webhook created
deployment.apps/cert-manager-cainjector created
deployment.apps/cert-manager created
deployment.apps/cert-manager-webhook created
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured

[lindhe]

I'm fairly sure this is the same issue as my issue here: https://github.com/helm/charts/issues/20363

[jaitaiwan]

Hey @iMacX I just realised that you and I have done the exact same, wrong thing...

In the documentation the manifest we're supposed to use for helm installation is:
https://raw.githubusercontent.com/jetstack/cert-manager/v0.13.0/deploy/manifests/00-crds.yaml

Note the cert-manager.yaml you've specified above. We can close this one now XD

[iMacX]

Well done, you are right. :-)
Issue can be closed. Thank you for your attention.

[jaitaiwan]

@iMacX as the Author you can close it.